How does your AML/CTF/AFC framework compare with 104 audits?
2026 Fincrime compliance report
104 AML/CTF/AFC audits | 484 findings | UK + 16 other jurisdictions
The 10th anniversary edition, and our largest dataset to date.
Between July 2025 and June 2026, fscom completed 104 AML/CTF/AFC audits across payments, e-money, investment, FX and treasury, cryptoasset and adjacent fintech firms. The findings show that controls on paper aren't always controls that work:
- Findings per audit rose from 4.26 to 4.65, and high-impact findings per audit from 1.01 to 1.14.
- 16 findings related to screening tool calibration failures, including missed known PEP or sanctions matches.
- The same weaknesses recurred across entities of multi-jurisdictional groups.
See where firms are falling short across WFRA, periodic reviews, compliance monitoring, screening and more, with practical recommendations for each of the 16 review and testing areas.
Download the 2026 fincrime compliance report
2026 findings data
A statistical overview of 484 findings recorded across 104 AML/CTF/AFC audits, including 119 high-impact findings and 365 low-impact findings.
Year-on-year comparison
A comparison of the 2025 and 2026 reports, showing how findings have shifted across core review and testing areas.
Risk assessment and due diligence insights
Themes emerging from whole firm risk assessments, customer risk assessment, and CDD file testing across regulated firms.
Monitoring and review weaknesses
Detailed analysis of periodic and event-driven reviews, transaction monitoring, and compliance monitoring, including where operational follow-through is breaking down.
Core control areas
Findings on PEPs, sanctions, and adverse media, plus insight into SARs, STRs, EDD, AML training, and policy governance.
Governance and oversight
Coverage of MLRO reporting and MI, agent and distributor monitoring, and the controls firms are using to evidence stronger oversight.
Emerging areas
A short combined section on Wire Transfer Regulations and vendor due diligence, where new issues are now being tracked separately.
Practical next steps
Practical recommendations to help your firm prioritise remediation, improve audit readiness, and strengthen compliance maturity.
Ready to benchmark your fincrime compliance maturity?
Download the 2026 fincrime compliance report to compare your AML/CTF/AFC framework with current audit findings across regulated financial services firms. You will get current data, recurring control themes, and practical recommendations you can use to strengthen oversight and remediation planning.
What does the 2026 fincrime compliance report cover?
The report covers 16 review and testing areas across AML, CTF, and AFC frameworks, including WFRA, periodic and event-driven reviews, compliance monitoring, PEPs and sanctions controls, customer risk assessment, transaction monitoring, AML training, SARs and STRs, EDD, MLRO reporting and MI, and emerging issues in WTR and vendor due diligence.
How many audits informed the report?
The 2026 report draws on 104 AML/CTF/AFC compliance audits finalised by fscom between July 2025 and June 2026. While most reviewed firms were UK based, the audit population also included firms across 16 non-UK jurisdictions.
Who should download the 2026 fincrime compliance report?
This report is built for Heads of Compliance, MLROs, Heads of AML, CEOs, and senior leaders in regulated financial services firms, including EMIs, APIs, PSPs, merchant acquirers, investment and FX firms, cryptoasset firms, VASPs, and money service businesses.
What data is included in the report?
You will find a statistical overview of 484 findings, including 119 high-impact findings and 365 low-impact findings, together with comparison data from the 2025 report and analysis across each review area.
How will the report help improve compliance maturity?
The report helps you benchmark your current framework, see where peers are encountering weaknesses, and prioritise remediation across the areas drawing the most serious findings. It is designed to give you practical insight you can take into planning, oversight, and audit preparation.
Can fscom help after I read the report?
Yes. If you want help working through the findings, fscom can support AML and fincrime audits, remediation planning, framework reviews, and practical steps to improve compliance maturity. Contact us at info@fscom.co.
Put the findings into action.
If the report highlights gaps in your AML/CTF/AFC framework, fscom can help you assess exposure, prioritise remediation, and strengthen controls across governance, monitoring, and oversight.
About the 2026 fincrime compliance report
fscom's Fincrime compliance report marks its tenth anniversary this year with its largest dataset to date. The 2026 edition draws on 104 AML/CTF/AFC compliance audits completed between July 2025 and June 2026, covering firms in the UK and 16 other jurisdictions. It highlights where controls are working, where weaknesses are recurring and what is emerging, with practical recommendations for each of the 16 review and testing areas.
fscom Compliance Maturity Specialists™ help financial services firms measure, master and maximise compliance maturity. We benchmark where firms stand against regulatory requirements and peer practice, then help their teams turn that insight into practical improvement.